tag:blogger.com,1999:blog-6293099363289106257.post8771200118627155005..comments2024-03-24T17:37:50.356+01:00Comments on The Microsoft Platform: Predefining and customizing the Modern UI Start Screen on RDS 2012Freek Bersonhttp://www.blogger.com/profile/12038184330882338623noreply@blogger.comBlogger46125tag:blogger.com,1999:blog-6293099363289106257.post-33958803843304491522017-10-31T22:57:02.486+01:002017-10-31T22:57:02.486+01:00Just go with classic shell, supports a common star...Just go with classic shell, supports a common start menu directory on a share and personal shortcuts. Configured via group policy and no user training required. Unknownhttps://www.blogger.com/profile/17836552254357855644noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-6087610024838188422017-07-20T12:43:29.683+02:002017-07-20T12:43:29.683+02:00ITIngredients offer free IT Training on Windows Se...ITIngredients offer free IT Training on Windows Server 2012 R2, Citrix XenApp, Citrix XenDesktop, VMWare ESXi, VMWare Horizon Air. It's a one stop shop for all the queries related to IT. <br /><br /><a href="http://www.itingredients.com/remove-shutdown-start-menu-via-gpo/" rel="nofollow">Remove shutdown from start menu with gpo</a>Health Care Tipshttps://www.blogger.com/profile/00868008236592882006noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-91639953631228375272016-02-19T11:47:31.283+01:002016-02-19T11:47:31.283+01:00Export Start Screen Layout into XML and then assig...Export Start Screen Layout into XML and then assign via local GPO didn't work for me. I can rely on this method. <br />The best approach: <br />1. Login with admin user, prepare your favorite Start Screen layout.<br />2. Copy appsfolder.itemdata-ms into Default path to make it available for all users. <br />3. Make it Read only<br />4. Create a StartLayout.bat file<br />@echo off<br />timeout /t 60<br />cd \Windows\System32<br />attrib %USERPROFILE%\appdata\local\microsoft\windows\appsfolder.itemdata-ms -R<br />Save batch file. <br />5. Create a RuninStart.VBS file<br />Set WshShell = CreateObject("WScript.Shell") <br />WshShell.Run chr(34) & "C:\Batch Files\StartLayout.bat" & Chr(34), 0<br />Set WshShell = Nothing<br />6. Create another batch file (RunInStart.bat)<br />@echo off<br />wscript c:\Batch Files\RuninStart.VBS<br />Save it. <br />7. Save RunInStart.bat file to Windows startup.<br /><br />What is does?<br />a) New User will login and new start screen template will be assigned.<br />b) after 60 seconds template ready only property will be removed so user can add app shortcut to start screen. <br />c) this method will avoid icon cluttering during first time user login. <br />Cheers... Jasdevhttps://www.blogger.com/profile/03916473946859414331noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-24740539992220578792016-02-10T16:21:50.463+01:002016-02-10T16:21:50.463+01:00disregard, my last, it now works all of a sudden.....disregard, my last, it now works all of a sudden....Anonymoushttps://www.blogger.com/profile/08775541183513212238noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-44916476778089438232016-02-10T16:10:20.287+01:002016-02-10T16:10:20.287+01:00I actually do see it in the root of the profile, b...I actually do see it in the root of the profile, but it doesnt actually load it when I login again.Anonymoushttps://www.blogger.com/profile/08775541183513212238noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-62884820238492241792016-02-10T16:04:18.602+01:002016-02-10T16:04:18.602+01:00Got most of it working but the following does not ...Got most of it working but the following does not happen:<br />------------------------------------<br />As you might have noticed, this folder is under the local section of the profile, meaning it would not roam. However, a copy of the file is created in %USERPROFILE%\ upon log off so that the file roams across different RD Session Host servers.<br />----------------------------------<br />I can create a starting start menu, have it taken off read only, and users can make changes to the start menu, but as soon as they log out all the changes are gone.<br /><br />I do delete local copies of profiles as soon as they log out.<br /><br />am I missing anything?Anonymoushttps://www.blogger.com/profile/08775541183513212238noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-41309565543495250092015-11-10T22:16:03.883+01:002015-11-10T22:16:03.883+01:00Windows 2012R2 has a GPO key, but it's read-on...Windows 2012R2 has a GPO key, but it's read-only (meaning the end user can't customize the Start menu or Taskbar if the setting is enabled). The GPO info above doesn't appear to work for R2, either. So... I ended up putting the c:\windows\system32\attrib.exe %USERPROFILE%\appdata\local\microsoft\windows\appsfolder.itemdata-ms -R command in a batch file w/ a shortcut on the default profile desktop (with the last line of the batch file deleting the shortcut). <br /><br />The user sees the batch file the first time they log in, they click it, the read-only attribute is removed & they can customize a pre-populated Start screen.<br /><br />Not as elegant as I'd like, but so far it's the only workaround I've been able to devise. Please let me know if you come up with anything better.<br />Anonymoushttps://www.blogger.com/profile/04029997805949646453noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-51701525033324524622015-02-16T16:40:05.679+01:002015-02-16T16:40:05.679+01:00Just to clarify, if you do not set the Read Only A...Just to clarify, if you do not set the Read Only Attribute in the Default folder, it will not copy into a new user? Can you copy that custom file into their profile path with another process?Blaze Lewishttps://www.blogger.com/profile/17787366507072347948noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-59516585805382010262014-03-26T10:36:49.921+01:002014-03-26T10:36:49.921+01:00Hi Klaus,
Permissions are set using AD group memb...Hi Klaus,<br /><br />Permissions are set using AD group membership, and because Access Based Enumeration is enabled on the share, users only "see" shortcuts they're authorized for. Obviously you still need solutions like e.g. AppLocker, to also make sure they cannot launch those applications using another method.Freek Bersonhttps://www.blogger.com/profile/12038184330882338623noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-69656901093637600952014-03-25T22:15:54.017+01:002014-03-25T22:15:54.017+01:00Good post, thank you. In the section with 'Her...Good post, thank you. In the section with 'Here the user is able to see shortcuts to the applications he’s authorized to.' where you show the apps page, how do you set permissions to what users is authorized to and what they are not?Klaus Lingskovhttps://www.blogger.com/profile/02932872840067652508noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-54840469617475494082014-03-07T22:16:52.099+01:002014-03-07T22:16:52.099+01:00The new way to do it
http://technet.microsoft.com...The new way to do it<br /><br />http://technet.microsoft.com/en-us/library/dn467928.aspxToTheRhizospherehttps://www.blogger.com/profile/05641989298426295496noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-22475799953772288542014-02-05T16:39:07.572+01:002014-02-05T16:39:07.572+01:00Hi Freek,
I'm running Windows Server 2012 R2 ...Hi Freek,<br /><br />I'm running Windows Server 2012 R2 and it seems that it doesn't work.<br />Also how did you create a GPO on a computer level?<br />I would appreciate a step by step instructions.Vladimirhttps://www.blogger.com/profile/03171176189387176582noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-13808546582410968002014-01-02T16:46:55.898+01:002014-01-02T16:46:55.898+01:00Thanks for this post! Helping me out a lot but pla...Thanks for this post! Helping me out a lot but placing the menu into the default folder is not working. My new users that are logging on are getting a different default menu from somewhere else.<br /><br />If i manually copy the file across to their locally created app data and then logoff/logon they receive the correct menu. Cant work out where the menu they receive on first logon is coming from?Anonymoushttps://www.blogger.com/profile/16220044686380241339noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-62716985514883207192013-11-30T12:53:35.322+01:002013-11-30T12:53:35.322+01:00Yes, I know. The problem is the following:
- I con...Yes, I know. The problem is the following:<br />- I configure a folder redirection for the start menu.<br />- In the redirected folder I create a folder named "Microsoft Office" and there I put shortcuts for Word and Excel.<br />- If the user logs on, he cannot see the header "Microsoft Office" nor the shortcuts to word and excel. He can see nothing! If I place the shortcuts directly in the root folder of the redirected start menu, the user can see the shortcuts.<br /><br />If I disable the startmenu gpo "remove access to common programs" everything is ok, but I cannot understand why the redirected start menu behaves this way (on 2008 r2 it was different). That policy should be about the start menu of the "all users" folder......Anonymoushttps://www.blogger.com/profile/10869959158333225313noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-57073111415365481412013-11-25T20:01:58.517+01:002013-11-25T20:01:58.517+01:00Hi Giuseppe,
You will not see a folder structure ...Hi Giuseppe,<br /><br />You will not see a folder structure in the All App Section. Sub folders are shows as header text, like e.g. "Accessoires" in the 4th screenshot of this blog post.Freek Bersonhttps://www.blogger.com/profile/12038184330882338623noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-75926750894187783242013-11-25T11:17:36.902+01:002013-11-25T11:17:36.902+01:00Hi freek, when I follow your guide and redirect th...Hi freek, when I follow your guide and redirect the start menu to a common location the users cannot see folders in redirected start menu. The see only entries in the root of the start menu folder. If I, for example, create a folder in the common start menu location called "microsoft office" the users cannot see the folder and the items inside that. All permiossions are ok, do you know where can i look to find the problem?<br /><br />Many thanks in advance.Anonymoushttps://www.blogger.com/profile/10869959158333225313noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-53393375676727571342013-11-06T14:00:28.653+01:002013-11-06T14:00:28.653+01:00Hi Brett,
Thanks for the input. In my case I have...Hi Brett,<br /><br />Thanks for the input. In my case I have configured this in the GPO on the Computer level, because more User GPO settings were configured there. However, to apply User Settings to an OU containing computers you need to configure Loopback processing in the GPO. More info: http://technet.microsoft.com/nl-nl/library/cc757470(v=ws.10).aspx If you want to use the User OU, that's fine too of course, only note that that policy will apply when they logon to ANY computer. In my case it only applied when they log on to a RD Session Host.Freek Bersonhttps://www.blogger.com/profile/12038184330882338623noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-67951131438843131712013-11-06T12:32:00.742+01:002013-11-06T12:32:00.742+01:00I seem to be having an issue with the Group Policy...I seem to be having an issue with the Group Policy Registry Entry.<br />If I assign the Group Policy to the Computer OU then it makes the correct entry in the HKEY Users\.Default\Software\Microsoft\Windows\CurrentVersion\Run however it doesn't seem to be removing the Read Only flag.<br /><br />Is the Default registry supposed to be copied over to the new user account?<br />Shouldn't we be setting the Add Registry item at the Users OU level?<br /><br />I've just tried this on my setup and it definitely works when assigning the Group Policy to the OU of your Users and creating the Registry Policy under User Configuration/Preferences/Windows Settings/Registry<br /><br />Thanks for the great tips but I think it should be done at the user level not the computer level. Feel free to correct me if I'm wrong but this works for me.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-51696472186770542562013-09-23T20:33:09.392+02:002013-09-23T20:33:09.392+02:00Hi Freek, I've followed your blog and can get ...Hi Freek, I've followed your blog and can get a customized start screen for new users, but only if they log on locally to the console of the session hosts. I am trying to access the collection from the Collection icon in RDWEB ( client environment is XP, so I think this is my only option). When I do this, the test user does not get the preconfigured start menu. I'm using UPD's configured to store all data. examining the binary file in the users UPD, I can see that they are not getting the read only binary file stored in default profile. Is there something else i need to do to make this work when connection is initiated from RDWEB.Anonymoushttps://www.blogger.com/profile/03314521414107474418noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-52304233649322590142013-09-13T11:15:10.314+02:002013-09-13T11:15:10.314+02:00Hi everyone,
tried this method for deploying a de...Hi everyone,<br /><br />tried this method for deploying a default startscreen to normal desktops (8.1 Enterprise preview) without redirecting the desktop. It kinda works (-:<br /><br />However when the file is made R/W at first logon the apps are automatically installed and pinned to the startscreen )-:<br /><br />When I manually make the file R/W at the second logon all is well; no apps and the user can customize.<br /><br />The R/W can also be done much easier with an 'update' file preference with only the target configured (%homedrive%%homepath%\blablabla...) and the checkbox 'Read Only' cleared...<br /><br />Now I only have to get it to run at second logon / not at first logon (-:Anonymoushttps://www.blogger.com/profile/01591062152517023303noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-50277860066239781892013-09-11T15:55:43.204+02:002013-09-11T15:55:43.204+02:00Hi Everyone,
In regards to some of the questions ...Hi Everyone,<br /><br />In regards to some of the questions about the combination of the above and User Profile Disks (UPD) also see: <br /><br />http://microsoftplatform.blogspot.nl/2013/09/using-user-profile-disks-upd-in.html<br /><br />Kind regards,<br />Freek BersonFreek Bersonhttps://www.blogger.com/profile/12038184330882338623noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-35137004714744606892013-09-07T06:48:48.786+02:002013-09-07T06:48:48.786+02:00Hi,
Yes, this method also works in combination wi...Hi,<br /><br />Yes, this method also works in combination with UPD. I've used that combination before. Just make sure you configure UPD so that the path where the binary files is stored is included.Freek Bersonhttps://www.blogger.com/profile/12038184330882338623noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-17668602332363918902013-09-06T17:30:41.615+02:002013-09-06T17:30:41.615+02:00Thanks for this, I look forward to trying it. Bas...Thanks for this, I look forward to trying it. Based on a comment above, would you be able to clarify if this method is expected to work with session based remote desktop deployment using User Profile Disks?edantohttps://www.blogger.com/profile/16267757422966924700noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-89027842437019306652013-08-12T19:32:44.337+02:002013-08-12T19:32:44.337+02:00Thank you for these instructions, they have helped...Thank you for these instructions, they have helped me setup a default start screen for a RDS server. I have tried creating shortcuts for shutdown tasks like log off and lock screen, but those shortcuts seem to disappear when new users log in. All the other programs show up fine. Any suggestions?Grahamhttps://www.blogger.com/profile/07930332870096746336noreply@blogger.comtag:blogger.com,1999:blog-6293099363289106257.post-79361275882435472152013-08-05T15:00:43.137+02:002013-08-05T15:00:43.137+02:00As far as i can see there is also an option throug...As far as i can see there is also an option through the Group Policy Preferences options, there is an option to create shortcut's for an user in their start menu.<br /><br />The downside with this is that it only works for current users, with an new user the shortcuts only get applied to the all apps part and not tot the start menu.Anonymoushttps://www.blogger.com/profile/13321648655246414489noreply@blogger.com